Privacy policy

Velora is a trading name of Pharmafocuss Limited

This Privacy Policy explains how Pharmafocuss Limited collects, uses, shares and protects personal information when you visit veloragorgeous.com, create an account, place an order, contact us or interact with Velora marketing.

1. Who is responsible for your information?

Pharmafocuss Limited is the controller of personal information processed through the Velora website and online store.

Company name: Pharmafocuss Limited
Company number: 13019550

Privacy enquiries, rights requests and data-protection complaints should be sent to:

customercare@pharmafocuss.com

2. Personal information we collect

Depending on how you interact with us, we may collect:

Information you provide

• Your name, billing address, delivery address, email address and telephone number;
• Account identifiers, authentication information and account preferences;
• Order details, products purchased, order value, delivery status, returns and refunds;
• Marketing preferences, newsletter subscriptions and records of consent or objections;
• Customer-service messages, complaints, product reviews and survey responses; and
• Any other information you choose to provide.

Where account authentication is handled by Shopify or another service provider, we do not normally receive or have access to your password.

Information collected automatically

We may collect:

• IP address, browser, operating system, time zone and device identifiers;
• Website security, login and fraud-prevention logs;
• Pages viewed, links selected, referral sources and shopping activity; and
• Cookie and similar-technology information, subject to your consent choices where required.

Payments

Payments are processed by Shopify and other payment providers available at checkout.

We do not normally receive or store complete payment-card details. We may receive limited information such as payment status, transaction identifiers, payment method, card type and fraud-prevention results.

Health and product-safety information

We do not normally request health information. However, you may provide information about allergies, skin sensitivity or an adverse product reaction when contacting customer care.

Where this happens, we will process only the information reasonably necessary to respond, investigate a product-safety concern, meet legal obligations or establish, exercise or defend legal claims. Where required, we may ask for your explicit consent or rely on another applicable condition under UK data-protection law.

Please provide only information that is relevant to your enquiry.

3. How we obtain information

We obtain personal information:

• Directly from you;
• Automatically when you use our website;
• From Shopify and our ecommerce service providers;
• From payment, fraud-prevention, fulfilment and delivery providers;
• From marketing, analytics and customer-support providers; and
• From social-media platforms when you interact with our official pages, subject to your settings and the platform’s privacy terms.

If you provide another person’s information—for example, when sending a gift—you should ensure that you are authorised to provide those details.

4. Why we use your information

Orders and customer accounts — contract

We use personal information to:

• Process payments;
• Accept and fulfil orders;
• Deliver products;
• Operate customer accounts;
• Send order and dispatch confirmations;
• Process cancellations, returns and refunds; and
• Provide customer service.

We do this where necessary to perform our contract with you or take steps at your request before entering into a contract.

Legal and regulatory obligations — legal obligation

We may retain or disclose information where necessary to comply with tax, accounting, consumer-protection, product-safety, regulatory, law-enforcement and other legal obligations.

Security and business administration — legitimate interests

We use information to:

• Protect customers, our website and our business;
• Prevent fraud, misuse and unauthorised access;
• Maintain appropriate business records;
• Manage complaints and disputes;
• Enforce our terms;
• Measure business performance; and
• Improve our website, products and customer service.

We rely on legitimate interests only where our interests are not overridden by your rights and freedoms.

Analytics and advertising — consent

Where consent is required, we use non-essential analytics, personalisation and advertising technologies only after you provide permission.

You may reject or change your non-essential cookie choices through our website’s cookie controls.

Email and electronic marketing — consent or soft opt-in

We may send marketing emails or other electronic marketing where:

• You have provided valid consent; or
• You purchased, or negotiated to purchase, a product from us, the marketing concerns our own similar products, and you were given a clear opportunity to opt out when your details were collected and in every subsequent message.

You can unsubscribe at any time. The UK soft opt-in has specific conditions, as explained in the ICO’s electronic-marketing guidance.

Order confirmations, delivery updates, product-safety notices and other necessary service messages are not marketing.

5. Information needed to place an order

Certain information, including your name, contact details, delivery address and payment information, is required to process and fulfil an order.

If you do not provide this information, we may be unable to accept your order, deliver the products or provide the requested service.

Providing information for marketing purposes is optional.

6. Who we share information with

We do not sell personal information for money.

We may share only the information reasonably necessary with:

• Shopify and providers that host or support our ecommerce store;
• Payment processors, banks and fraud-prevention providers;
• Warehouses, fulfilment companies, couriers and postal operators;
• Email, customer-service, review and communications platforms;
• Analytics, advertising and social-media providers, subject to consent where required;
• IT, cybersecurity, cloud-storage and professional advisers;
• Regulators, courts, law-enforcement bodies and tax authorities where disclosure is required or permitted by law; and
• Potential buyers, investors and professional advisers in connection with a proposed sale, restructuring or transfer of our business, subject to appropriate confidentiality protections.

If you submit a product review, the review and the name or nickname you provide may be displayed publicly, as explained when the review is collected.

Some providers may act as our processors, while others may process information as independent controllers under their own privacy policies.

7. International transfers

Some service providers or authorised personnel may process personal information outside the United Kingdom.

Where information is transferred to a country not covered by UK adequacy regulations, we will use an appropriate legal safeguard. This may include:

• The UK International Data Transfer Agreement;
• The UK Addendum to the EU Standard Contractual Clauses; or
• Another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your personal information.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy and to comply with legal, tax, accounting, product-safety and dispute-resolution requirements.

Our usual retention periods and criteria include:

• Orders, invoices and core transaction records: generally six years after the end of the relevant accounting period;
• Customer-service records: for as long as needed to resolve the enquiry and normally for up to three years afterwards;
• Account information: while the account remains active and afterwards for the period reasonably required to handle disputes, fraud and legal obligations;
• Marketing information: until you unsubscribe or object;
• Suppression records: retained where necessary to ensure that we continue to respect an unsubscribe or objection;
• Cookie information: for the periods stated in our Cookie Policy or cookie-consent tool; and
• Security and fraud records: for a period determined by the nature of the risk and applicable legal requirements.

Information may be kept longer where necessary to comply with law, investigate suspected fraud, address product-safety concerns or establish, exercise or defend legal claims.

9. Cookies and similar technologies

We use essential cookies to operate features such as the shopping basket, checkout, account access, security and payment processing.

With your permission, we may also use analytics, personalisation and advertising cookies.

Where consent is legally required, non-essential cookies remain disabled until you make a choice. You can accept, reject or change your preferences through the website’s cookie controls.

Disabling essential cookies may prevent parts of the website from functioning correctly. Further information about individual cookies, providers, purposes and retention periods should be provided in our Cookie Policy or consent tool.

10. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• Request access to personal information we hold about you;
• Ask us to correct inaccurate or incomplete information;
• Ask us to erase information in certain circumstances;
• Ask us to restrict processing in certain circumstances;
• Object to processing based on legitimate interests;
• Object at any time to the use of your information for direct marketing;
• Receive certain information in a portable format or ask us to transfer it;
• Withdraw consent at any time where processing relies on consent;
• Request appropriate safeguards concerning certain automated decisions;
• Make a data-protection complaint to us; and
• Complain to the Information Commissioner’s Office.

These rights are not absolute, and legal exemptions may apply. We may request information reasonably necessary to verify your identity.

We normally respond to rights requests without undue delay and within one calendar month, subject to any lawful extension.

To exercise a right, email customercare@pharmafocuss.com.

11. Automated decision-making

Our ecommerce, payment and fraud-prevention providers may use automated tools to identify potentially fraudulent or high-risk transactions.

We do not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects.

Where we use automated decision-making covered by UK data-protection law, we will provide the required information and safeguards. These may include an opportunity to request human review, express your point of view and challenge the decision.

Payment or fraud-prevention providers may also make decisions as independent controllers under their own privacy policies.

12. Children

The Velora online store is not directed at children under 16, and we do not knowingly collect personal information directly from children under 16 for account creation or marketing.

If you believe that a child has provided personal information without appropriate authorisation, contact customercare@pharmafocuss.com.

13. Security

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Marketing choices

You can unsubscribe by selecting the unsubscribe link in a marketing email or by contacting customercare@pharmafocuss.com.

Unsubscribing from marketing will not stop order confirmations, delivery updates, product-safety notices or other necessary service communications.

15. Data-protection complaints

You have the right to make a complaint to us if you are concerned about how we have handled your personal information.

Email customercare@pharmafocuss.com and use the subject line “Data Protection Complaint.”

We will:

• Acknowledge your complaint within 30 days;
• Take appropriate steps to investigate it without undue delay;
• Keep you informed where appropriate; and
• Communicate the outcome without undue delay.

These requirements became applicable to UK organisations on 19 June 2026 under the Data (Use and Access) Act 2025. ICO complaints guidance.

16. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, technology, legal obligations or business practices.

The current version will be published on this page with an updated revision date. We will provide additional notice where required for a material change.

Contact details

Velora is a trading name of Pharmafocuss Limited
Company number: 13019550
Privacy and customer-care enquiries:
customercare@pharmafocuss.com